vibeSecPolicyResponse

Examples

type VibeSecPolicyResponse {
  governanceEnabled: Boolean!
  decisions: [FeatureDecisionEntry!]!
  secureCoding: SecureCodingConfigResponse!
  codeAnnotations: CodeAnnotationsConfigResponse!
  riskPreventionTelemetry: RiskPreventionTelemetryConfigResponse!
  mcpGovernance: McpGovernanceConfigResponse!
  commandsGovernance: CommandsGovernanceConfigResponse!
  dependenciesGovernance: DependenciesGovernanceConfigResponse!
  mcpGuard: McpGuardConfigResponse!
  oxPresence: OxPresenceConfigResponse!
  showGuidelineName: ShowGuidelineNameConfigResponse!
  externalSaasGovernance: ExternalSaasGovernanceConfigResponse!
  aiModelGovernance: AiModelGovernanceConfigResponse!
  promptSecretScan: PromptSecretScanConfigResponse!
  sensitiveDataProtection: SensitiveDataProtectionConfigResponse!
  skillsGovernance: SkillsGovernanceConfigResponse!
  blockMaliciousSkills: BlockMaliciousSkillsConfigResponse!
}

Fields

Field	Description	Supported fields
governanceEnabled Boolean!	Persisted master switch for governance children. When false, every governance child cascades to effective=false with blockedBy=parent.
decisions [FeatureDecisionEntry!]!	Per-feature decision (configured vs effective + blockedBy reason) computed from the three-level AND-cascade.	feature VibeSecFeature! configured Boolean! effective Boolean! blockedBy BlockedBy
secureCoding SecureCodingConfigResponse!	Guideline injection configuration	isEnabled Boolean
codeAnnotations CodeAnnotationsConfigResponse!	Inline security annotation configuration	isEnabled Boolean
riskPreventionTelemetry RiskPreventionTelemetryConfigResponse!	Prevented-risk telemetry configuration	isEnabled Boolean
mcpGovernance McpGovernanceConfigResponse!	MCP server and tool governance configuration	isEnabled Boolean defaultServerPolicy McpGovernanceAccessMode servers [McpServerPolicyEntryResponse!]
commandsGovernance CommandsGovernanceConfigResponse!	Risky shell command governance configuration	isEnabled Boolean
dependenciesGovernance DependenciesGovernanceConfigResponse!	Dependency governance configuration	isEnabled Boolean maliciousDependencies MaliciousDependenciesConfigResponse minimumVersionAge MinimumVersionAgeConfigResponse
mcpGuard McpGuardConfigResponse!	Stdio MCP server guard configuration	isEnabled Boolean
oxPresence OxPresenceConfigResponse!	"Secured by OX" session preamble configuration	isEnabled Boolean
showGuidelineName ShowGuidelineNameConfigResponse!	Guideline-name visibility configuration	isEnabled Boolean
externalSaasGovernance ExternalSaasGovernanceConfigResponse!	External SaaS governance configuration	isEnabled Boolean
aiModelGovernance AiModelGovernanceConfigResponse!	AI model governance configuration	isEnabled Boolean
promptSecretScan PromptSecretScanConfigResponse!	When enabled, hooks scan each prompt locally, and based on policy, either block those carrying credentials or allow them but alert on Agent Activity Log. Only the secret type and an already-masked value reach the backend.	isEnabled Boolean action PromptSecretScanAction
sensitiveDataProtection SensitiveDataProtectionConfigResponse!	When enabled, only metadata is persisted to Mongo. Commands are reduced to the executable basename, file paths to the basename, and some free-text inputs are replaced with a placeholder before write.	isEnabled Boolean
skillsGovernance SkillsGovernanceConfigResponse!	Agent skill scanning configuration	isEnabled Boolean
blockMaliciousSkills BlockMaliciousSkillsConfigResponse!	Malicious skill blocking configuration	isEnabled Boolean

References

Queries using this object:

• <?> getVibeSecPolicy